Attested SY0-501 Dumps PDF Resource [2022]
Latest SY0-501 Actual Free Exam Questions Updated 715 Questions
NEW QUESTION 131
An organization wants to utilize a common, Internet-based third-party provider for authorization and
authentication. The provider uses a technology based on OAuth 2.0 to provide required services. To which
of the following technologies is the provider referring?
- A. SAML
- B. Open ID Connect
- C. XACML
- D. LDAP
Answer: B
NEW QUESTION 132
A researcher has been analyzing large data sets for the last ten months. The researcher works with colleagues from other institutions and typically connects via SSH to retrieve additional data. Historically, this setup has worked without issue, but the researcher recently started getting the following message:
Which of the following network attacks Is the researcher MOST likely experiencing?
- A. MAC cloning
- B. Man-in-the-middle
- C. ARP poisoning
- D. Evil twin
Answer: B
Explanation:
This is alarming because it could actually mean that you're connecting to a different server without knowing it. If this new server is malicious then it would be able to view all data sent to and from your connection, which could be used by whoever set up the server. This is called a man-in-the-middle attack. This scenario is exactly what the "WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!" message is trying to warn you about.
NEW QUESTION 133
A help desk technician is trying to determine the reason why several high-level officials' account passwords need to be reset shortly after implementing a self-service password reset process. Which of the following would BEST explain the issue?
- A. The system asked for publicly available information
- B. A spear phishing attack occurred
- C. The self-service system was compromised
- D. The account passwords expired
Answer: D
Explanation:
Explanation
NEW QUESTION 134
Which of the following best describes routine in which semicolons, dashes, quotes, and commas are removed from a string?
- A. Padding to protect against string buffer overflows.
- B. Exception handling to protect against XSRF attacks.
- C. Input validation to protect against SQL injection.
- D. Error handling to protect against program exploitation
Answer: C
NEW QUESTION 135
A security administrator is given the security and availability profiles for servers that are being deployed.
Match each RAID type with the correct configuration and MINIMUM number of drives.
Review the server profiles and match them with the appropriate RAID type based on integrity, availability, I/O, storage requirements. Instructions:
All drive definitions can be dragged as many times as necessary
Not all placeholders may be filled in the RAID configuration boxes
If parity is required, please select the appropriate number of parity checkboxes Server profiles may be dragged only once If at any time you would like to bring back the initial state of the simulation, please select the Reset button. When you have completed the simulation, please select the Done button to submit. Once the simulation is submitted, please select the Next button to continue.
Answer:
Explanation:
NEW QUESTION 136
A company recently added a DR site and is redesigning the network. Users at the DR site are having issues browsing websites.
INSTRUCTIONS
Click on each firewall to do the following:
1. Deny cleartext web traffic
2. Ensure secure management protocols are used.
3. Resolve issues at the DR site.
The ruleset order cannot be modified due to outside constraints.
Hat any time you would like to bring back the initial state of the simulation, please dick the Reset All button.
Answer:
Explanation:
Check the answer in explanation.
Explanation
In Firewall 1, HTTP inbound Action should be DENY. As shown below
In Firewall 2, Management Service should be DNS, As shown below.
In Firewall 3, HTTP Inbound Action should be DENY, as shown below
NEW QUESTION 137
A network administrator needs to restrict the users of the company's WAPs to the sales department. The network administrator changes and hides the SSID and then discovers several employees had connected their personal devices to the wireless network. Which of the following would limit access to the wireless network to only organization-owned devices in the sales department?
- A. Reducing the signal strength to encompass only the sales department
- B. Issuing a BYOD policy
- C. Implementing MAC filtering
- D. Replacing the APs and sales department wireless cards to support 802.11b
Answer: D
NEW QUESTION 138
A company would like to transition its directory service from an OpenLDAP solution to Active Directory. The main goal for this project is security. All authentications to the domain controllers must be as secure as possible. Which of the following should the company use to achieve this goal?
- A. RADIUS
- B. LDAP
- C. Kerberos
- D. Shibboleth
Answer: B
NEW QUESTION 139
After discovering a buffer overflow vulnerability an application the security analyst needs to report it to the development team leader. Which of the following are MOST to appear m the impact section of the report? (Select TWO).
- A. An attacker can execute arbitrary code using the application
- B. An attacker can inject DLLs into the server via the application
- C. An attacker can obtain privileged data handled by the application
- D. An attacker can pivot to other servers using the application
- E. An attacker can execute a DDoS on the server
Answer: A,E
NEW QUESTION 140
Ann, a new employee, received an email from an unknown source indicating she needed to click on the provided link to update her company's profile. Once Ann clicked the link, a command prompt appeared with the following output:
Which of the following types of malware was executed?
- A. Spyware
- B. Virus
- C. Ransomware
- D. Adware
Answer: C
NEW QUESTION 141
A vulnerability scan was run multiple times. The first lime, the scan detected multiple operating system flaws The second time the scan indicated that a few third-party application programs required patching and no operating system flaws. Which of the following is the MOST likely cause tor the different scan results?
- A. The second scan used credentials that were configured for time-of-day scanning
- B. The vulnerability scanner was not configured with the common vulnerability and exposure database
- C. The initial scan used credentials mat had limited access to system resources
- D. The first scan had full-system scanning capabilities
Answer: D
NEW QUESTION 142
A security analyst is hardening an authentication server. One of the primary requirements is to ensure there is mutual authentication and delegation. Given these requirements, which of the following technologies should the analyst recommend and configure?
- A. Kerberos services
- B. NTLM services
- C. CHAP services
Answer: C
NEW QUESTION 143
A system in the network is used to store proprietary secrets and needs the highest level of security possible.
Which of the following should a security administrator implement to ensure the system cannot be reached from the Internet?
- A. NAT
- B. Air gap
- C. Firewall
- D. VLAN
Answer: B
Explanation:
Explanation
An air gap, air wall or air gapping is a network security measure employed on one or more computers to ensure that a secure computer network is physically isolated from unsecured networks, such as the public Internet or an unsecured local area network.
NEW QUESTION 144
Which of the following attacks can be mitigated by proper data retention policies?
- A. Man-in-the-browser
- B. Spear phishing
- C. Watering hole
- D. Dumpster diving
Answer: D
NEW QUESTION 145
HOTSPOT
Select the appropriate attack from each drop down list to label the corresponding illustrated attack.
Instructions: Attacks may only be used once, and will disappear from drop down list if selected. When you have completed the simulation, please select the Done button to submit.
Hot Area:
Answer:
Explanation:
NEW QUESTION 146
An organization electronically processes sensitive data within a controlled facility. The Chief Information Security Officer (CISO) wants to limit emissions from emanating from the facility.
Which of the following mitigates this risk?
- A. Hardening the facility with a Faraday cage to contain emissions produced from data processing
- B. Employing security guards to ensure unauthorized personnel remain outside of the facility
- C. Upgrading facility cabling to a higher standard of protected cabling to reduce the likelihood of emission spillage
- D. Hardening the facility through the use of secure cabinetry to block emissions
Answer: A
NEW QUESTION 147
......
SY0-501 Certification Overview Latest SY0-501 PDF Dumps: https://www.testkingit.com/CompTIA/latest-SY0-501-exam-dumps.html